$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa File: 4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa (raw, json) Hash identifier: KQoaF/z4od4AcL5IAfWYUuibC2xG7WHtfgWQVVYNCeg= Subject key identifier: D3:0F:5F:64:2A:6D:E6:55:6A:B8:21:C0:C1:61:2A:80:68:EC:73:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EE3A98061D1E6E6E4F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 36616 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:3a:98:06:1d:1e:6e:6e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=2373a5c8-1f15-40be-adc1-f4ecd34e1e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:01:a4:68:74:09:6a:56:d6:3d:76:b4:dd: 55:8b:19:91:86:57:c4:00:f2:36:33:fc:df:8c:ee: 5d:19:d9:f1:b1:b8:e0:d6:b3:88:5d:cb:83:08:ad: 9c:39:11:9c:ac:72:c5:fa:6b:b5:74:a6:57:43:7f: 60:c7:de:b3:ad:9a:71:41:91:93:57:32:b2:f0:53: 02:1b:bf:40:5f:b9:e2:04:1d:f1:8a:29:b5:30:22: 56:44:a3:b4:cd:db:59:f7:a4:24:53:dd:39:87:f0: f4:48:54:05:9b:5e:c2:8f:a6:91:2c:8d:e9:a1:31: 79:85:bf:18:2c:b0:1a:6e:e0:95:7a:1c:37:00:f7: eb:4b:57:a2:2a:f3:fa:ae:77:e9:6c:38:ef:b8:45: a8:4d:07:ae:ad:06:8d:d1:72:0f:3f:ba:26:e9:6f: f4:e2:c5:69:5c:1c:fa:1d:11:41:61:41:cb:40:f9: ec:a4:a1:2e:7e:3c:f5:94:1d:50:93:30:75:48:f1: 52:33:73:57:a2:0b:2f:77:f1:33:66:f7:a5:e8:80: 15:c8:7a:3f:62:07:4f:dd:04:18:08:97:d4:41:f8: ec:94:69:85:e0:14:ad:37:ce:6a:4e:6f:98:13:dd: 24:a3:90:e5:c7:98:e2:33:4c:ba:be:70:ce:ff:3a: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0F:5F:64:2A:6D:E6:55:6A:B8:21:C0:C1:61:2A:80:68:EC:73:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7c:77:55:63:f1:a2:79:eb:03:ca:14:89:36:cd:13:81:97: 6b:57:f8:62:dc:83:da:29:6a:3f:37:cc:9f:71:2a:65:a5:ba: cd:26:52:ee:73:df:45:66:b9:31:4c:4c:19:9e:e2:e1:1e:08: 1a:22:9a:03:33:d7:ad:34:30:3b:6a:e0:57:e6:f1:0b:20:e0: 9d:3a:09:4c:e9:20:07:56:c7:75:8e:39:2c:48:84:11:f7:89: 17:8b:2a:63:dc:24:59:87:20:0a:90:e2:85:5f:57:39:2f:b1: 68:84:c1:d4:5c:3b:52:79:4a:f0:f3:f2:93:69:69:12:be:bc: 74:99:3e:02:1f:bd:67:12:2c:0f:a2:ee:93:f2:ed:5e:f2:d3: 45:d2:3c:32:2c:d9:9b:15:94:e3:17:10:df:33:99:cb:d5:15: 22:54:fe:0c:ed:de:64:b1:9b:e1:c8:b7:99:4d:19:70:39:77: d8:76:91:4f:d0:41:2c:79:a4:e8:c7:a0:32:28:6c:17:40:ef: a0:7c:33:d3:0c:86:4d:a1:b4:2f:55:2a:54:58:57:cc:78:b2: c9:18:4b:4f:66:31:12:5e:af:9a:98:70:f4:e2:1e:db:19:dc: 53:43:b8:1a:18:f9:0f:c8:5a:55:f4:6d:33:82:ab:2e:28:c9: e9:e3:1c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu46mAYdHm5uTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MjM3M2E1YzgtMWYxNS00MGJlLWFkYzEtZjRlY2QzNGUxZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCABpGh0CWpW1j12tN1VixmRhlfEAPI2M/zf jO5dGdnxsbjg1rOIXcuDCK2cORGcrHLF+mu1dKZXQ39gx96zrZpxQZGTVzKy8FMC G79AX7niBB3xiim1MCJWRKO0zdtZ96QkU905h/D0SFQFm17Cj6aRLI3poTF5hb8Y LLAabuCVehw3APfrS1eiKvP6rnfpbDjvuEWoTQeurQaN0XIPP7om6W/04sVpXBz6 HRFBYUHLQPnspKEufjz1lB1QkzB1SPFSM3NXogsvd/EzZvel6IAVyHo/YgdP3QQY CJfUQfjslGmF4BStN85qTm+YE90ko5Dlx5jiM0y6vnDO/zpo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMPX2QqbeZVarghwMFhKoBo7HNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkYjNhMTctNjhhMS0z MjNiLTljZGQtMmI1NjkzYzRiY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ8d1Vj8aJ56wPKFIk2zROBl2tX+GLcg9opaj83zJ9xKmWlus0mUu5z 30VmuTFMTBme4uEeCBoimgMz1600MDtq4Ffm8Qsg4J06CUzpIAdWx3WOOSxIhBH3 iReLKmPcJFmHIAqQ4oVfVzkvsWiEwdRcO1J5SvDz8pNpaRK+vHSZPgIfvWcSLA+i 7pPy7V7y00XSPDIs2ZsVlOMXEN8zmcvVFSJU/gzt3mSxm+HIt5lNGXA5d9h2kU/Q QSx5pOjHoDIobBdA76B8M9MMhk2htC9VKlRYV8x4sskYS09mMRJer5qYcPTiHtsZ 3FNDuBoY+Q/IWlX0bTOCqy4oyenjHJQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:15 2025 by rpki-client